CVEvulnerability
CVE-2009-0215
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• ibm access support activex control 3.20.284.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/52958 osvdb.org
- http://secunia.com/advisories/34470 secunia.com
- http://www.kb.cert.org/vuls/id/340420 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/34228 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0824 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49409 exchange.xforce.ibmcloud.com
- http://osvdb.org/52958 osvdb.org
- http://secunia.com/advisories/34470 secunia.com
- http://www.kb.cert.org/vuls/id/340420 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/34228 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0824 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49409 exchange.xforce.ibmcloud.com